Legal
Privacy Policy
Last updated: 10 August 2026
This policy explains how TEKYDOCT SDN BHD ("TEKYDOCT", "we", "us") handles personal data in connection with this website, www.tekyagent.com, and with social accounts you connect to AI TekyAgent ERP.
It applies to this website, and to the connected social accounts feature of the AI TekyAgent ERP product, which is described below because it involves data held by third-party platforms on your behalf. Other data you process inside the product is governed by your separate subscription or trial agreement and the applicable data-processing terms, not by this policy.
Using the mobile app? The AI TekyAgent ERP app for Android and iOS handles data this policy does not cover — attendance and location, payslips, photos, and the in-app Ask Teky assistant. That is set out separately in our Mobile App Privacy Policy.
Information we collect
- Information you give us. If you contact us, request a demo or request a quote, you may share your name, work email, company, country, phone number, product interests and message. Fields marked as required are needed for us to respond; optional fields can be left blank.
- Chat with Teky Bot. What you and the assistant type is kept as a record of the conversation, for up to 12 months, so we can answer your enquiry and improve the replies. Your messages are sent to OpenAI to generate each answer. If you fill in the optional “get back to me” card you also give us your name, email and phone number; those go into our own customer records so a colleague can reply to you, in the chat window or by email. The card is a plain form — what you enter in it is never sent to OpenAI. You can use the chat without filling it in.
- Technical information. Like most websites, our servers may log standard request data (such as IP address, browser type and pages viewed) for security and reliable operation.
- Cookies & local storage. We use a small amount of strictly-necessary storage to remember your cookie choice. With your consent, we may also use privacy-friendly analytics. See our Cookie Policy.
How we use information
- To respond to your enquiries and arrange demos or trials.
- To send product news or offers when you separately opt in.
- To operate, secure and improve this website.
- To meet legal and regulatory obligations.
We rely on your consent for optional analytics and marketing, our legitimate interest in running and improving our website securely, and steps taken at your request before entering into a contract.
Sharing
We do not sell your personal data. We may share it with trusted service providers who help us operate the site and communicate with you. These may include our configurable website hosting, form-delivery, email and consented analytics providers, OpenAI (which generates the chat assistant’s replies from your messages), and parties to whom disclosure is required by law. The providers used can change as our services evolve; they are engaged subject to appropriate data-protection terms.
Connected social accounts
The Marketing module of AI TekyAgent ERP can publish to social accounts you own — such as a Facebook Page, an Instagram Business account or a LinkedIn Page — and read how those posts performed. This section describes that feature specifically. It applies only if someone in your organisation chooses to connect an account; nothing below happens otherwise.
What connecting does
You are sent to the platform itself — Facebook, LinkedIn and so on — to sign in and approve access. We never see or store your password for those platforms. The platform then gives us an access token, and you choose which of your pages or accounts the connection covers.
What we store
- Access tokens, which let us publish on your behalf. These are encrypted at rest and are never shown in our interface, exported, logged, or shared with anyone.
- The account you selected — its identifier, name, profile picture and the permissions the platform granted, so we can show you which account is connected and whether it is still working.
- Post content you create in our composer, together with the identifier the platform returns for each published post.
- Aggregate engagement counts for your own posts — likes, comments and shares — so you can see how content performed.
What we do not store
- The identities of people who engaged with your posts. We read counts, not who liked or shared something.
- Your follower or connection lists.
- Anything from accounts you did not connect, and nothing from a connected account beyond what is listed above.
What we never do with it
We do not sell it, transfer it to third parties, use it for advertising or audience building, combine it with other customers’ data, or use it to train machine-learning models. It is shown only to authorised users in your own organisation.
Disconnecting, and deleting the data
Anyone in your organisation with the right permission can disconnect an account at any time, from Marketing → Social → Channels. Disconnecting destroys the stored access tokens immediately. Posts already published stay live on the platform — disconnecting stops us posting, it does not retract what was posted, which only the platform can do.
You can also revoke our access from the platform’s own settings (for example, Facebook’s Business Integrations page), which has the same effect from their side.
To have the stored content and engagement data deleted as well, email sales@tekydoct.com. We complete such requests within 30 days. Facebook and Instagram users may also submit a deletion request through Facebook, which reaches us automatically and receives a tracking reference you can use to check its status.
How long we keep it
Post content and engagement counts are kept for as long as your organisation keeps its account with us, or until you ask us to delete them. Access tokens are kept only while the account is connected.
The platforms’ own terms
Each platform remains the controller of the data it holds about you and your audience, under its own privacy policy — Meta’s for Facebook and Instagram, LinkedIn’s for LinkedIn. Our access is limited to what you approved when you connected the account, and you can withdraw it at any time as described above.
Data residency & international transfers
We are based in Bandar Seri Begawan, Brunei. Where data is processed outside your country — including where a configured hosting, form, email or analytics provider processes it — we take steps intended to provide appropriate protection. You can contact us for information about providers and transfer safeguards relevant to your request. For regulated and government customers, the AI TekyAgent ERP product can be deployed as a dedicated in-country instance to meet data-residency requirements.
Retention
We keep personal data only for as long as needed for the purposes above, taking account of the enquiry lifecycle, whether a commercial relationship follows, applicable legal obligations and the need to resolve disputes. Chat conversations are deleted automatically after 12 months; contact details you gave us in the chat are treated like any other enquiry rather than on that clock. Marketing details are kept until you opt out or they are no longer needed for that purpose.
Your rights
Subject to applicable law, you may request access to, correction or deletion of your personal data, object to or restrict certain processing, and withdraw consent at any time. You may opt out of marketing using the method provided in a message or by contacting us. To exercise these rights or raise a privacy concern, contact us at sales@tekydoct.com. We may need to verify your identity before completing a request.
Security
We use appropriate technical and organisational measures to protect personal data. No method of transmission or storage is completely secure, but we work to safeguard your information.
Children
This website is intended for businesses and is not directed to children.
Changes
We may update this policy from time to time. We will revise the "last updated" date above when we do.
Contact
TEKYDOCT SDN BHD, Bandar Seri Begawan, Brunei. Email sales@tekydoct.com.
